a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560 | Triage

Analysis

max time kernel
142s
max time network
147s
platform
windows10_x64
resource
win10
submitted
18-07-2020 04:23

Sharing

Report Analysis Logs

General

Target

a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
Size

273KB
MD5

86e4d99a5e09cc2a82966ad331ca4367
SHA1

6ab28b16be8a24227ba8b3d3d4f479b59a6038af
SHA256

a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560
SHA512

1abb21ba4d4d5cb135c7bc1ef8021c7172636429438a1b5323acfa978fcf122aad87c389d5d2014e6f2d9f0fca17c4bcae5463aad26ccb0f1142fda01aaf7c4f

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe

Suspicious behavior: EmotetMutantsSpam 1 IoCs

pid	Process
3044	a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe

C:\Users\Admin\AppData\Local\Temp\a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe
"C:\Users\Admin\AppData\Local\Temp\a545548fe52a7af6cfe5a7a40ec90c16b2de2ace353ed407e974de55e7dd7560.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: EmotetMutantsSpam
PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-0-0x0000000002250000-0x000000000225C000-memory.dmp

Filesize
48KB

Download
memory/3044-1-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download